CVE-2024-54387

Summary

CVE-2024-54387 is a Cross-site Scripting (XSS) vulnerability affecting the Posts Date Ranges component of Jaytesh Barange's plugin. An attacker can inject malicious scripts into a web page generated by this component, posing a threat to users who visit the affected site. The vulnerability exists in all versions from n/a to 2.2 and allows for reflected XSS attacks. Users are advised to update to the latest version and implement XSS protection measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.